The legal FUD you bring up would have some basis in fact if the government weren't mandating that all US physicians use EHR systems and passed laws/regulations defining their use and liability under HIPAA and the security rule.

The #1 source of patient data theft has occurred from stolen laptops which contained locally stored records. A cloud based solution with mobile access is much more secure since even if an iPad is stolen there is no loss of data.